Vulnerability details

CVE-2025-58772

AMI AptioV

UEFI OOB Write and Buffer Overflow Vulnerabilities

CVSS 4.0
8.2High

Official description

AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS scores

ScoreVersionSourceVector
8.2High 4.0 CVEProject cvelistV5 (CNA) (AMI) CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:H

Affected products

VendorProductVersionsSource
AMI AptioV AptioV_5.0 ≤ v < AptioV_5.044 CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-10-13
Last updated
2026-10-13
State
Published
Assigner (CNA)
AMI

Exploit prediction (EPSS)

0.12%
Probability of exploitation in 30 days
2.1%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-120
    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')